111.113.89.151

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
40% Elevated
174 reports
54 reporters · latest 2 hours ago
ISP
CHINANET ningxia province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
yc.nx.cn
Country
🇨🇳 China
City
Yinchuan, Ningxia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
174 from 54 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇲🇳 Mongolia 3 🇩🇪 Germany 2
Most common categories Port Scan 14 Hacking 5 Brute-Force 1 FTP Brute-Force 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 1971.
Port Scan Hacking
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: FTP Probe (8030/tcp) [non-standard port]
FTP Brute-Force Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 8230 [1] TCP
Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 2229) Source port: 62359 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 111.113.89.151) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
2026-10-04T04:53:05.334495+13:00 fbsj-server sshd[2340539]: banner exchange: Connection from 111.113.89.151 port 41698: invalid format ...
Brute-Force SSH
🇺🇸 sumnone
Port probing on unauthorized port 16073
Port Scan Hacking Exploited Host
🇩🇪 iNetWorker
firewall-block, port(s): 3306/tcp
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 7941 [1] TCP
Port Scan
🇺🇸 MPL
tcp/49671
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇺🇸 MPL
tcp/10222 (2 or more attempts)
Port Scan
🇬🇧 sandra361
Port scan detected: 5 attempts across 1 port (49156). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=111.113.89.151 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=48280 DF PROTO=TCP SPT=59432 DPT=49156 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇳🇱 donarev419
Connection to port 6561 with data transfer. Data preview: �
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2223 [1] TCP
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 12108) Source port: 42932 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 111.113.89.151) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.57.142.155
🇺🇸 193.202.14.69
🇳🇱 193.47.62.69
🇷🇺 188.254.110.88
🇨🇦 165.22.226.184
🇸🇬 161.120.183.236
🇳🇱 86.38.187.200
🇫🇮 77.95.172.248
🇺🇸 66.132.195.77
🇺🇸 20.115.49.24
🇰🇷 218.234.186.2
🇦🇺 202.47.1.13
🇧🇷 191.180.161.164
🇮🇳 182.95.226.138
🇳🇱 160.119.66.206
🇵🇰 153.117.69.19
🇺🇸 146.75.136.170
🇪🇸 145.249.109.88
🇵🇱 104.164.171.97
🇸🇪 95.143.196.97
feedback